A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

# Security.txt voor securenameserver2.net
# Conform RFC 9116

Contact: mailto:info@securenameserver2.net
Expires: 2026-03-18T06:16:30Z
Canonical: https://securenameserver2.net/.well-known/security.txt
Canonical: https://www.securenameserver2.net/.well-known/security.txt
Policy: https://securenameserver2.net
Encryption: https://securenameserver2.net/.well-known/pgp-key.txt
Preferred-Languages: nl, en
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)

iQEcBAEBAgAGBQJoeea+AAoJEM7mUqiUToOwR3MIAJEmz1t5RgxI6wSqMWLk24gy
/0KOk9eW4Uu91+Ax9tC3d8Coj8gL7FFByikXY1OO07J26VAW6mkJ+Tl6SG8f7KxM
Se9ombYZxJSfcdDNHrlxF6H+RrBOApmIGtu6CfAevcuLEBFDh2iU7SGYZC/kZYYR
cPPfgr7SzAD5A0yIYBfO3PmFl6X3VoT/Nhj8xjKDSpVdEmg+66MmWl4eZEc9xNrb
bm/adoI+PIUAOl2f6k2Ux0gY6TQqBNozawlxzvQXqkyEBkuQPPbmB+f6gBV75VVQ
dmgUVirWcre7XuWXF17W41lFFi2D7iqA3+RJH8lOIjg6oOEZizjAz1sNqSCF3x8=
=54sB
-----END PGP SIGNATURE-----